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Top Stories 

• Athena Capital Research in New York agreed to pay $1 million in penalties to resolve U.S. 
Securities and Exchange Commission charges that the firm engaged in the manipulation of 
NASDAQ-listed stocks by placing large numbers of rapid, aggressive trades 2 seconds 
before the end of trading. - U.S. Securities and Exchange Commission (See item 4 ) 

• Six crew members and 38 passengers aboard an Arkansas and Missouri Railroad passenger 
train were injured after a freight train crashed into it while it was stalled on a small grade in 
northwest Arkansas October 16. - CNN (See item 6) 

• The Baltimore County Department of Public Works announced October 16 that an 
estimated 17,553 gallons of sewage was discharged into Gwynns Falls in Maryland, 
beginning September 24 through October 2. - Baltimore Sun (See item 13 ) 

• Firefighters responded to the Beech Grove Firearms gun store in Indiana October 17 after a 
fire that broke out October 16 reignited causing a collective $2 million in damage. - WRTV 
6 Indianapolis (See item 27 ) 
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Energy Sector 



1. October 16, KTHV 11 Little Rock - (Arkansas) 2 injured in Entergy substation 
failure. Entergy is investigating after two employees were injured in a substation 
failure October 15 after a piece of equipment malfunctioned in Marshall, Arkansas. 
Preliminary reports determined a regulator failed, de-energizing the substation and 
causing extensive damage. 

Source: http ://w w w .thv 1 1 .com/storv/news/local/20 14/10/1 6/marshall-entergy- 
substation-failure/17361 101/ 

2. October 16, New Orleans Times-Picayune - (International) Offshore oil platform 
owner agrees to $1 million fine for unauthorized oil, chemical discharges. The U S. 
Environmental Protection Agency, U.S. Department of Justice, and Bureau of Safety 
and Environmental Enforcement announced October 16 that ATP Infrastructure 
Partners, LP agreed to pay a $1 million fine to a settle a federal lawsuit over illegal 
discharges of oil and dispersants. The portion of the lawsuit against ATP Oil & Gas 
remains unsolved after the companies partnered together to operate the ATP Innovator 
platform atop its Gomez well in the Mississippi Canyon, which was found to have a 
metal tube connected to the wastewater outfall pipe allowing the discharge of the 
dispersant Cleartron ZB- 103. 

Source: 

http://www.nola.com/environment/index.ssf/2014/10/offshore oil platform owner ag. 
html 
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Chemical Industry Sector 

3. October 16, WNWO 24 Toledo - (Ohio) Truck accident, ammonia spill closes Wood 
County intersection. A semi-truck carrying ammonia flipped over after it was struck 
by a vehicle that failed to stop at a stop sign while traveling on Ohio State Route 281 in 
Portage, causing an unknown amount of the chemical to leak onto the roadway and into 
a nearby ditch. Homes were evacuated for several hours and the intersection was 
expected to be closed for several days while crews cleaned the spill and monitored the 
water supply in the area. 

Source: http://www.nbc24.com/news/story.aspx?id=l 1 1055 1 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 



Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

4. October 16, U.S. Securities and Exchange Commission - (New York) SEC charges 
New York-based high frequency trading firm with fraudulent trading to 
manipulate closing prices. New York City-based high frequency trading firm Athena 
Capital Research agreed to pay $1 million in penalties to resolve U.S. Securities and 
Exchange Commission charges that the firm engaged in the manipulation of NASDAQ- 
listed stocks by placing large numbers of rapid, aggressive trades 2 seconds before the 
end of trading over a 6 month period. The case was the first high frequency trading 
stock manipulation case. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370543184457 

5. October 16, South Florida Sun Sentinel - (Florida) Broker admits guilt in Ponzi 
fraud. A Miami broker pleaded guilty October 16 to his role in the $1.4 billion Ponzi 
scheme run out of the Rothstein Rosenfeldt Adler law firm in Fort Fauderdale. The 
broker was charged for assisting in several fraudulent deals that were part of the larger 
Ponzi scheme. 

Source: http://www.sun-sentinel.com/local/broward/fl-rothstein-david-pearson-brf- 
20141016-story.html 
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Transportation Systems Sector 

6. October 1 7, CNN - (Arkansas) Train collision injures 44 on fall foliage ride in 
northwest Arkansas. Six crew members and 38 passengers aboard an Arkansas and 
Missouri Railroad passenger train touring fall foliage were injured after a freight train 
crashed into it while it was stalled on a small grade in northwest Arkansas October 16. 
Authorities are investigating the incident. 

Source: http://www.cnn.com/2014/10/16/us/arkansas-train-collison/index.html 

7. October 17, KMOV 4 St. Louis - (Missouri) 1-70 reopens after fatal accident. An 
accident forced the closure of eastbound lanes of Interstate 70 in St. Charles County for 
approximately 2 hours October 17 when a pedestrian was struck and killed by a 
passenger vehicle. 
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Source: http://www.kmov.com/news/local/EB-Lanes-of-I-70-closed-near-Highway-94- 
due-to-serious-accident-279541 182.html 



8. October 17, Lebanon Valley News - (Vermont) Triple truck accidents delay 1-91 
traffic. A portion of Interstate 91 southbound was closed for nearly 6 hours while 
crews responded to an accident involving a semi-truck whose driver lost control of the 
vehicle and drove down into an embankment, crashing into a rock ledge. Responders 
also reported two other unrelated semi-truck accidents on the interstate October 17. 
Source: http://www.vnews.com/home/13962855-95/triple-truck-accidents-delay-i-91- 
traffic 

9. October 17, Doylestown Intelligencer - (Pennsylvania) Tractor- trailer accident 
closes turnpike in Bucks for several hours. A portion of westbound Pennsylvania 
Turnpike was shut down for 3 hours October 16 when a semi-truck jackknifed, struck a 
bridge, and spilled roughly 100 gallons of diesel fuel into the Neshaminy Creek. Crews 
cleared the scene and allowed to creek’s natural currents to disperse the fuel. 

Source: http://www.theintell.com/news/local/tumpike-reopened-after-truck-accident-in- 
bucks/articie al 688d38-6583-5552-be8e-5ac74d87efl O.html 

10. October 16, Camdenton Lake Sun Leader - (Missouri) RPD: Suspicious package was 
meant to steal mail. The Rolla Post Office in Missouri and surrounding businesses 
were evacuated for roughly 7 hours October 16 while a bomb squad inspected a 
suspicious package found in a mail receptacle outside the building, which turned out to 
be a device designed to extract mail from a postal box. Officials cleared the scene and 
continue to investigate the incident. 

Source: http://www.lakenewsonline.com/article/20141016/NEWS/141019194 



T Return to top i 

Food and Agriculture Sector 

11. October 16, Associated Press - (Idaho) Jerome Cheese Co. agrees to $88K EPA 
settlement over anhydrous ammonia. Jerome Cheese Company agreed to pay 
$88,000 in penalties to resolve allegations by the U.S. Environmental Protection 
Agency that the cheese producer failed to implement appropriate safety policies and 
record keeping systems for the storage of 10,000 gallons of anhydrous ammonia at the 
company’s facility in Idaho. 

Source: http://www.spokesman.com/blogs/boise/2014/oct/16/jerome-cheese-co-agrees- 
88k-epa-settlement-over-anhydrous-ammonia/ 

12. October 16, U.S. Department of Agriculture - (Massachusetts; New York) 

Massachusetts firm recalls chicken products due to possible misbranding and 
undeclared allergen. The Food Safety and Inspection Service reported October 16 that 
Shop Packaging LLC initiated a recall for about 1 15,505 pounds of chicken wing 
products due to undeclared soy lecithin caused by misbranding. The product was sold 
in 20-pound bags and shipped to a distribution facility in New York. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
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aleits/recall-case-archive/archive/2014/recall-070-2014-release 
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Water and Wastewater Systems Sector 

13. October 16, Baltimore Sun - (Maryland) Sewage leak at Gwynns Falls takes eight 
days to repair. The Baltimore County Department of Public Works announced 
October 16 that an estimated 17,553 gallons of sewage was discharged into Gwynns 
Falls beginning September 24, and lasted through October 2 before crews were able to 
repair a broken sewer pipe. Workers made several attempts to plug the leak after 
determining a tree had fallen on the pipe. 

Source: http://www.baltimoresun.com/news/maryland/baltimore-citv/bs-md-ci-sewage- 
overflow-20141016-storv.html 

14. October 16, KTVX 4 Salt Lake City - (Utah) Boil advisory lifted for Stansbury Park 
residents. A boil water advisory was lifted for Stansbury Park residents October 16 
after 18 water samples came back negative for coliform bacteria. The advisory went 
into effect October 14 after the water supply in several homes tested positive for the 
bacteria. 

Source: http://www.good4utah.com/storv/d/story/boil-advisorv-lifted-for-stansburv- 
park-residents/34195/rKihNzPw9EWTFgxmQlVrXg 

For another story, see item 9 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

15. October 17, KXXV 25 Waco - (Texas) Midway Middle School closed Friday after 
gas leak detected. Students were evacuated and classes were dismissed at Midway 
Middle School in Hewitt October 17 after a gas leak from a heater accumulated 
overnight. Crews reported to the scene to clear out the gas from the building. 

Source: http://www.kxxv.com/story/26812620/midwav-middle-school-evacuated-after- 
strong-gas-smell-detected 

16. October 16, KTLA 5 Los Angeles - (California) Man suspected of making threat 
against Pierce College had assault rifle, handgun: Sheriff’s department. Pierce 
College in Woodland Hills was evacuated for 7 hours October 16 after a threat on 
social media claimed that an armed gunman may come to the campus. Police arrested a 
Northridge man on suspicion of making the threat and found an assault rifle, handgun, 
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and several rounds of ammunition at his home. 

Source: http://ktla.com/2014/10/16/pierce-college-in-woodland-hills-evacuated-due-to- 
unknown-threat/ 



17. October 16, Durham Herald-Sun - (North Carolina) Woman pleads guilty to 
financial aid fraud. A woman from Durham pleaded guilty October 9 to defrauding 
the federal financial aid program out of $121,793 in grants and loans while attending 
North Carolina Central University from 2007 to 2012 by making false statements on 
her application. The suspect’s sister also obtained federal funds through falsifying 
income documents receiving $113,188. 

Source: http://www.heraldsun.com/news/showcase/x532297853/Woman-pleads-guilty- 
to-financial-aid-fraud 

18. October 16, Fairfield Citizen - (Connecticut) Nine students hospitalized for minor 
injuries after Kings Highway school bus collision. An accident on Kings Highway 
East in Connecticut involving a Fairfield Woods Middle School bus that was rear- 
ended by another vehicle at a bus stop left 9 students injured October 16. 

Source: http://www.fairfieldcitizenonline.com/news/article/Nine-students-hospitalized- 
for-minor-iniuries-5826785.php 

19. October 16, WFXT 25 Boston - (Rhode Island) School bus carrying 31 children 
involved in accident. Seven children were transported to an area hospital with injuries 
after an accident involving a school bus and a vehicle in Woonsocket October 16. 
Source: http://www.mvfoxboston.com/storv/26804188/school-bus-carrying-31- 
children-involved-in-accident 

20. October 16, WEYI 25 Saginaw - (Michigan) A Grand Blanc elementary evacuated 
after fire. Police believe an electrical box may have ignited a fire at McGrath 
Elementary School in Grand Blanc October 16 prompting an evacuation and the 
cancellation of classes. Officials announced that the school will be closed October 17 
while authorities continue to investigate the fire. 

Source: http://www.minbcnews.com/news/story.aspx?id=l 1 10864 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

21. October 17, Threatpost - (International) SAP patches DoS flaw in Netweaver. SAP 
released a patch for its Netweaver platform that closes a remotely exploitable denial of 
service (DoS) vulnerability reported by Core Security researchers in June. The 
vulnerability could allow an unauthenticated attacker to use a specially crafted SAP 
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Enqueue Server packet to create the DoS condition. 

Source: http://threatpost.com/sap-patches-dos-flaw-in-netweaver/108896 

22. October 17, IDG News Service - (International) New technique allows attackers to 
hide stealthy Android malware in images. Two researchers presenting at the Black 
Hat Europe conference October 16 revealed a technique dubbed AngeCryption that 
could allow an attacker to hide malicious Android applications inside image files in 
order to avoid detection by antivirus programs and potentially the Google Play store’s 
malware scanner. 

Source: http://www.networkworld.com/article/2835433/new-technique-allows- 
attackers-to-hide-stealthy-android-malware-in-images.html 

23. October 16, Softpedia - (International) XSS risk found in links to New York Times 
articles prior to 2013. A student reported and published a proof of concept for a 
vulnerability in articles on the New York Times Web site published before 2013 that 
could allow attackers to hijack browser sessions, direct users to phishing sites, or steal 
cookies by exploiting a cross-site scripting (XSS) flaw. The vulnerability exists on 
pages containing certain buttons and does not affect the most recent versions of popular 
Web browsers. 

Source: http://news.softpedia.com/news/XSS-Risk-Found-In-Links-to-New-York- 
Times-Articles-Prior-to-201 3-462334. shtml 



24. October 16, The Register - (International) Bad news, fandroids: He who controls the 
IPC tool, controls the DROID. Researchers with Check Point presenting at the Black 
Hat Europe conference October 16 detailed a flaw in the Android inter-process 
communication (IPC) tool Binder that could allow attackers to override in-app security 
features to tamper with apps and steal passwords and other information. 

Source: 

http://www.theregister.co.uk/2014/10/16/android messaging mechanism security fla 
wed/ 



25. October 16, IDG News Service - (International) All-in-one printers can be used to 
control infected air-gapped systems from far away. A cryptographer and two 
researchers from Ben-Gurion University presenting at the Black Hat Europe conference 
October 16 demonstrated how an all-in-one printer could be used to issue commands to 
infected systems on an air-gapped network by shining infrared or visible light at the 
scanner lid when open, issuing commands to malware already planted on the system via 
USB drive or other method. The researchers were able to successfully test the method 
at a target printer inside a building at 200, 900, and 1,200 meters and stated that a more 
powerful laser could produce reliable results from up to 5 kilometers. 

Source: http://www.networkworld.com/article/2834973/allinone-printers-can- 
be-used-to-control-infected-airgapped-svstems-from-far-away.html 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

26. October 15, TV Technology - (Texas) FCC fines Texas TV Group $86,400 for 
unauthorized BAS. The U.S. Federal Communications Commission (FCC) issued an 
$86,400 fine against Texas-based Midessa Television for allegedly operating several 
unauthorized broadcast auxiliary services for a number of years in violation of FCC 
rules. 

Source: http://www.tvtechnologv.com/news/0086/fcc-fines-texas-tv-group--for- 
unauthorized-bas/272865 
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Commercial Facilities Sector 

27. October 17, WRTV 6 Indianapolis - (Indiana) Fire reignites at Beech Grove gun 
store after Thursday blaze. Firefighters responded to the Beech Grove Firearms gun 
store in Indiana October 17 after a fire that broke out October 16 reignited, causing a 
collective $2 million in damage. The initial blaze is believed to have started when a 
patron used the wrong type of bullet on a firing range at the facility, prompting an 
evacuation of 20 customers and 7 employees. 

Source: http://www.theindvchannel.com/news/local-news/crews-respond-to-fire-at- 
beech- grove- gun- store 

28. October 17, Huron Daily Tribune - (Michigan) Fire destroys businesses in Marlette. 
Nicol Motor Sales in Marlette suffered an estimated $800,000 in damage following an 
October 14 fire that broke out while workers were changing a fuel pump in a gas tank 
at the business. 

Source: http://www.michigansthumb.com/news/local/article 4c2bl322-55f9-lle4- 
952c-d3735fe945eb.html 

29. October 16, WABC 7 New York City - (New York) Fire at Old Navy store in 
Midtown Manhattan. Officials are investigating after a fire broke out inside an Old 
Navy store in the Herald Square area of Manhattan in New York City October 16, 
prompting the evacuation of the business. Patrons were allowed to re-enter the store to 
obtain their belongings once the fire was out. 

Source: http://7online.com/news/fire-at-old-navv-store-in-midtown-/353848/ 

30. October 16, WTWO 2 Terre Haute; WAWV 38 Terre Haute - (Indiana) Bomb threat 
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puts area of festival on hold. Hundreds of people were evacuated from The Big Tent 
section of the Covered Bridge Festival in Parke County for about 2 hours October 16 
while police investigated a reported bomb threat. Authorities cleared the scene and 
resumed the festival after nothing suspicious was found. 

Source: http://www.mvwabashvallev.com/story /d/story/bomb-threat-puts-area-of- 
festival-on-hold/41679/8THecrNa-kC CdBEzc9IUA 



31. October 16, WBRC 6 Birmingham - (Alabama) Officials: 'All clear' at Northport 
Walmart after bomb threat. A Walmart in Northport was evacuated and closed for 
over 2 hours October 16 due to a bomb threat that was called into the store. The store 
reopened after police cleared the scene. 

Source: http://www.mvfoxal.com/storv/26807888/northport-walmart-evacuated- 
because-of-bomb-threat 
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Dams Sector 



Nothing to report 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 
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material. 




- 10 - 




